jpreese

package kubewrap

# This is a proof of concept to allow us to use the same policies for both k8s manifests
# and admission controllers.

# This may be a good open source candidate if there are no other alternatives.

default is_admission_review = false
is_admission_review {
	input.kind == "AdmissionReview"

jpreese

/**
* RETURN INTERFACE
*/

type Parser interface {
	Unmarshal(p []byte, v interface{}) error
}

func GetParser(fileName string) Parser {
	suffix := filepath.Ext(fileName)

jpreese

// EXAMPLE 1
for i := range feed.Index[mixin][version].Files {
  if feed.Index[mixin][version].Files[i].File == filename {
    if feed.Index[mixin][version].Files[i].Updated.Before(updated) {
      feed.Index[mixin][version].Files[i].Updated = updated
    }

    return nil
  }
}

jpreese

// Pod starts a port-forward on a given pod
func Pod(config *rest.Config, namespace string, pod string, ports []string, fn func() error) error {
	roundTripper, upgrader, err := spdy.RoundTripperFor(config)
	if err != nil {
		return fmt.Errorf("get roundtripper: %w", err)
	}

	path := fmt.Sprintf("/api/v1/namespaces/%s/pods/%s/portforward", namespace, pod)
	hostIP := strings.TrimLeft(config.Host, "https://")
	serverURL := url.URL{Scheme: "https", Path: path, Host: hostIP}

jpreese

FROM golang:1.13 as builder
RUN apt-get update \
  && apt-get install unzip

# Install terraform-bundle
RUN git clone \
  --depth 1 \
  --single-branch \
  --branch "v0.12.0" \
  https://github.com/hashicorp/terraform.git \

jpreese

repos:
# The list of repositories Atlantis watches. Supports wildcards/*
- id: dev.azure.com/org/project/first-repo

  # Only allow "apply" comments if the PR is approved and can be merged
  apply_requirements: [approved, mergeable]
  workflow: terragrunt

# Instead of terraform commands, run these for plan and apply
workflows:

jpreese

#!/bin/sh 
# These values are already provided to the container from
# the Kubernetes manifest.
echo username=$ATLANTIS_AZUREDEVOPS_WEBHOOK_USER
echo password=$ATLANTIS_AZUREDEVOPS_TOKEN

jpreese

[credential "https://dev.azure.com"]
	helper = "/bin/sh /home/atlantis/azure-devops-helper.sh"

jpreese

# The version of Terraform to include with the bundle.
terraform {
  version = "0.12.21"
}

# The providers to pre-download and include in the Atlantis image.
providers {
  azurerm     = ["~> 2.0.0"]
  azuread     = ["~> 0.7.0"]
  random      = ["~> 2.2.0"]

jpreese

package main

violation[msg] {
  input.kind == "Namespace"
  not input.metadata.labels["owner"]
  
  msg := "All namespaces must contain an owner label"
}